Easergy T300 Firmware (Schneider-electric) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2022-03-18. Vendor: Schneider-electric.

CVEs of Easergy T300 Firmware

CVE-2020-25176 - CVSS 9.8 (critical), 2022-03-18: Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file…
CVE-2020-25182 - CVSS 6.7 (medium), 2022-03-18: Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could…
CVE-2020-25180 - CVSS 6.5 (medium), 2022-03-18: Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The…
CVE-2020-25178 - CVSS 8.8 (high), 2022-03-18: ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. This communication protocol provides various file…
CVE-2020-25184 - CVSS 7.8 (high), 2022-03-18: Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file.…
CVE-2021-22771 - CVSS 7.3 (high), 2021-07-21: A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow…
CVE-2021-22770 - CVSS 6.5 (medium), 2021-07-21: A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not…
CVE-2021-22769 - CVSS 5.3 (medium), 2021-06-11: A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or…
CVE-2020-28216 - CVSS 7.5 (high), 2020-12-11: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network…
CVE-2020-28215 - CVSS 9.8 (critical), 2020-12-11: A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including…
CVE-2020-28218 - CVSS 6.5 (medium), 2020-12-11: A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker…
CVE-2020-28217 - CVSS 7.5 (high), 2020-12-11: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network…
CVE-2020-7561 - CVSS 9.8 (critical), 2020-11-19: A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of…
CVE-2020-7513 - CVSS 7.5 (high), 2020-06-16: A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to…
CVE-2020-7503 - CVSS 8.8 (high), 2020-06-16: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute…
CVE-2020-7506 - CVSS 7.5 (high), 2020-06-16: A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive…
CVE-2020-7509 - CVSS 7.2 (high), 2020-06-16: A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to…
CVE-2020-7512 - CVSS 9.8 (critical), 2020-06-16: A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older)…
CVE-2020-7505 - CVSS 7.2 (high), 2020-06-16: A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to…
CVE-2020-7508 - CVSS 9.8 (critical), 2020-06-16: A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow…
CVE-2020-7511 - CVSS 7.5 (high), 2020-06-16: A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an…
CVE-2020-7504 - CVSS 5.3 (medium), 2020-06-16: A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the…
CVE-2020-7507 - CVSS 7.5 (high), 2020-06-16: A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to login…
CVE-2020-7510 - CVSS 7.5 (high), 2020-06-16: A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow attacker to obtain private keys.